Security Bulletin: Deprecation of TLS 1.0 & 1.1

This bulletin addresses upcoming security changes to the MED e-care Platform.

What’s changing?

Why are we making this change?

What does this mean for you?

MED e-care Online Application

MED e-care Offline Application & MAR Backup Reports

MED e-care Platform Interfaces (API, MAR, and ADT Interfaces)

We're always here

What’s changing?

On November 30th 2022 support for communication to the MED e-care Platform using TLS 1.0 & 1.1 will be deprecated. All future communication will require TLS 1.2+.

Why are we making this change?

MED e-care is committed to providing the highest level of service, security, and support for our customers.  While we have continued to provide TLS 1.0 & 1.1 support for customers using legacy systems, HIPAA and NIST guidelines such as those outlined SP 800-52 Rev.2 (https://csrc.nist.gov/publications/detail/sp/800-52/rev-2/final) requires the use of TLS 1.2+. SSL Labs has lowered the domain grade for TLS 1.0 & 1.1 to “B” on January 31^st, 2020.

What does this mean for you?

If you are an end-user of the MED e-care Platform and do not have access to make changes to the devices that you use to connect to us, please forward this bulletin to your IT Department or relevant support personnel.

MED e-care Online Application

Since all major browsers deprecated support for TLS 1.0 & 1.1 in early 2020, no action may be required to maintain access to the Online Application.  However, older Operating Systems may not support modern browsers or TLS 1.2+.  Please ensure that all devices using the Online Application are using a major supported browser (MED e-care System Requirements - UK / MED e-care System Requirements - Canada) and can support connections over TLS 1.2+.

MED e-care Offline Application & MAR Backup Reports

Over the next few months, we will be making changes to the MED e-care Offline Application and MAR Backup Reports Service to only connect to the MED e-care Platform using TLS 1.2+.  To support these changes, devices that use these applications will need to meet the following requirements:

• Windows 8, 10 or 11 Operating System
• .NET Framework 4.7.1+ Installed
• Support for TLS 1.2+ Protocols
• IIS 8.0+ (for the Offline Application only)

MED e-care Platform Interfaces (API, MAR, and ADT Interfaces)

After the change date, Interfaces will only accept connections from clients using TLS 1.2+.  Please ensure that the software platforms that you use to connect and transmit data to our interfaces can communicate with TLS 1.2+.  Since we do not have knowledge of the software that you use to connect to us, please contact your software vendor for directions on supporting TLS 1.2+.  If your software will not meet the requirement to support TLS 1.2+, please contact your software vendor for directions on supporting TLS 1.2+.

We're always here

If you have any questions, concerns, or need support while updating your systems, please don’t hesitate to reach out to us at support@mede-care.com